EUVD-2025-11424

Malicious code in bioql PyPI...

EUVD-2025-11440

Malicious code in bioql PyPI...

EUVD-2023-27795

Malicious code in bioql PyPI...

EUVD-2025-11408

Malicious code in bioql PyPI...

EUVD-2024-51504

Malicious code in bioql PyPI...

EUVD-2022-4162

Malicious code in bioql PyPI...

EUVD-2024-28454

Malicious code in bioql PyPI...

EUVD-2024-52892

Malicious code in bioql PyPI...

EUVD-2023-40075

Malicious code in bioql PyPI...

EUVD-2025-11404

Malicious code in bioql PyPI...

EUVD-2021-30241

Malicious code in bioql PyPI...

EUVD-2025-11403

Malicious code in bioql PyPI...

EUVD-2025-11399

Malicious code in bioql PyPI...

php security update

An update is available for php. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PHP is an HTML-embedded scripting language commonly used with the Apache HTTP...

CVE-2025-52654: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation...

CLSA-2025-1759418654 cups: Fix of CVE-2025-58060

CVE-2025-58060: fix authentication bypass issue caused by not checking password when AuthType is not Basic...

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...

Malicious code in @imou/web-front-basic-alg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09a2b21767c80d9ac4dee1814eba71363cbdaf62aace137c60392788a16ad8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cups: Authentication Bypass in CUPS Authorization Handling

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

CLSA-2025-1759329269 cups: Fix of 2 CVEs

CVE-2023-4504: validate length of attacker-crafted PPD PostScript documents to prevent heap-based buffer overflow and possible code execution - CVE-2025-58060: fix authentication bypass issue caused by not checking password when AuthType is not Basic...